Villa Layla Hostel: legal notice & privacy

Legal notice (Impressum)

The organizer has not provided complete contact details yet. Please contact the platform provider (see below) if you need them.

The organizer is solely responsible for its events and is the contractual partner of attendees. Events are published using the platform Eventplanner, provided by Benedikt Ulrich (imprint of the platform).

Privacy notice for attendees

Controller

Villa Layla Hostel

What we process and why

• Registration – name, email address, phone number (if requested), your answers, chosen date, payment method and status, check-in time: to carry out your registration and the event (Art. 6(1)(b) GDPR).
• Emails – confirmation with calendar file and ticket, payment and location information, notice if a date is cancelled (Art. 6(1)(b) GDPR).
• Invitations to future events – for free events only if you agreed (Art. 6(1)(a) GDPR); for paid events as an existing customer unless you object (Art. 6(1)(f) GDPR, § 7(3) UWG). You can unsubscribe at any time via the link in every invitation.
• Payments – if you pay online, you are redirected to Stripe or PayPal, which process your payment data under their own responsibility.

Recipients

The platform provider Benedikt Ulrich processes the data on our behalf (Art. 28 GDPR), using the following service providers: Vercel Inc., Prisma Data, Inc., Email provider (SMTP). Data is stored in the EU (Frankfurt); where a provider is based in the USA, transfers are based on the EU-U.S. Data Privacy Framework or EU Standard Contractual Clauses. See the platform privacy policy for details.

Storage period

Registration data is kept as long as needed to organize the event and for statutory retention obligations (e.g. tax law, up to 8 years for accounting records), and is deleted on request where no retention obligation applies. You can cancel your registration at any time via the link in your confirmation email; it is then deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR), and to withdraw consent at any time. Please contact the organizer. You can also lodge a complaint with a data protection supervisory authority, in particular in your country of residence.

Name and email address are required to register; without them, registration is not possible. There is no automated decision-making.